Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/BxcgvqS3xkub_jGbz_hQ8eOOQNY.roa
File: BxcgvqS3xkub_jGbz_hQ8eOOQNY.roa (raw, json)
Hash identifier: W1i8bUPBxGu0hhsuSnKqfgby4jwUhjPo0PE43aRMKqw=
Subject key identifier: 07:17:20:BE:A4:B7:C6:4B:9B:FE:31:9B:CF:F8:50:F1:E3:8E:40:D6
Certificate issuer: /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Certificate serial: 018CC87155B3E404221D757A3B9EA4FF93E7
Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/BxcgvqS3xkub_jGbz_hQ8eOOQNY.roa
Signing time: Tue 02 Jan 2024 04:31:59 +0000
ROA not before: Tue 02 Jan 2024 04:31:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59653
IP address blocks: 81.94.40.0/24 maxlen: 24
193.33.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:55:b3:e4:04:22:1d:75:7a:3b:9e:a4:ff:93:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Validity
Not Before: Jan 2 04:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=071720bea4b7c64b9bfe319bcff850f1e38e40d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:43:23:3b:43:0e:00:f1:db:c0:c0:5d:5f:
5c:9d:95:18:98:5d:ed:35:52:1a:93:20:82:11:bf:
ad:b9:74:50:e8:5f:72:88:e4:4b:bc:31:a2:f0:5d:
25:68:1a:d7:57:81:82:ea:53:98:0c:74:ab:e9:71:
0d:a8:66:26:ae:1a:83:70:f7:45:49:e0:86:32:eb:
82:11:01:46:11:a3:89:84:a9:03:b0:d8:8a:cc:31:
85:3e:78:b2:aa:b7:d9:e8:b0:c3:85:cd:7f:58:9a:
9d:43:3c:ac:1a:55:36:e8:75:38:35:e6:a3:f6:a7:
99:fd:94:63:ff:c9:ac:45:2c:f2:28:3f:bf:4d:a7:
fc:de:53:32:4d:68:14:49:32:60:9e:df:50:e0:3c:
08:15:66:d0:8e:28:8e:a1:05:8c:7d:d3:e7:70:90:
5b:ca:2d:77:e6:ce:3b:5b:e1:7e:c0:03:a7:f3:85:
a8:b0:a5:4d:b0:b5:f1:c6:0f:ee:d3:77:b5:f2:20:
0e:6e:02:ff:83:85:98:e3:04:b2:0c:5a:48:ae:ad:
3b:21:ed:bf:21:2a:92:0b:61:b8:50:31:a7:33:32:
07:5b:72:03:8e:c8:b0:4f:ab:d2:bc:77:6a:21:cf:
93:39:e2:53:0a:f2:31:5f:3e:45:3d:31:79:ad:ed:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:20:BE:A4:B7:C6:4B:9B:FE:31:9B:CF:F8:50:F1:E3:8E:40:D6
X509v3 Authority Key Identifier:
keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/BxcgvqS3xkub_jGbz_hQ8eOOQNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.40.0/24
193.33.208.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a9:fa:7d:dc:e3:2f:79:c1:b8:48:55:e5:87:42:cb:e5:30:
26:4b:3b:84:28:cd:c8:36:bb:a8:57:f1:fb:9e:cb:3b:1c:ca:
b7:7e:fe:66:79:3e:4b:c7:b4:f1:dc:ad:9f:0b:6c:87:4c:34:
9f:e0:a7:9a:aa:58:bd:8a:13:3b:ba:ab:51:b2:cd:f9:11:a4:
41:0c:e2:bb:38:ff:06:1b:66:2d:d6:56:1b:af:74:a8:83:81:
7e:8f:cc:dc:ff:51:e1:af:0b:f1:f6:3e:6d:25:3a:e7:ae:f6:
ba:4d:43:81:b9:0d:54:dc:e0:61:05:fb:5e:05:9a:86:9b:46:
98:1c:5f:6a:7c:28:c9:62:00:af:e2:e2:a1:ad:6c:65:80:ef:
dc:0d:98:a4:9f:55:b5:cc:15:f5:33:3a:93:86:76:a4:39:1c:
1d:d7:a7:33:84:91:36:8d:f7:2a:65:28:7a:1c:dc:83:28:c0:
5d:d7:78:52:14:4c:e6:65:f4:3a:be:19:ef:ae:32:27:6c:26:
c7:1a:1e:6e:f2:06:eb:76:bb:dc:8b:53:60:31:2e:a0:f1:25:
da:8b:8e:95:4b:2f:b3:5d:57:bf:89:4e:e6:92:08:03:9b:46:
51:e8:02:2e:f8:0d:94:ba:00:f0:89:cd:14:8f:0a:81:e0:81:
9c:a2:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:16:12 2024 by rpki-client on console-ams.rpki-client.org